crustdata-supabase

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python scripts for administrative tasks and data processing. setup_database.py manages the creation of Supabase tables and indexes, while prospect_search.py handles the end-to-end lead generation pipeline, including network requests, data normalization, and local file writing (CSV exports).
  • [EXTERNAL_DOWNLOADS]: The skill communicates with external APIs to fetch lead data. It targets api.crustdata.com via a vendor-managed proxy at app.gooseworks.ai. Both the target service and the proxy domain are legitimate and directly related to the skill's documented functionality.
  • [SAFE]: The skill demonstrates a strong security posture by incorporating safeguards against accidental data corruption. Specifically, it defines a 'Database Write Policy' in its instructions that prohibits automated writes to the Supabase database without explicit user approval. Furthermore, the skill avoids hardcoding sensitive credentials, instead relying on standard .env configuration files for managing Supabase and CrustData API keys.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 07:04 PM
Security Audit — agent-trust-hub — crustdata-supabase